Vulnerabilities · 7h ago
IBM and the Dutch NCSC said IBM has fixed 10 CVEs in Guardium Data Protection 12.0, 12.1, and 12.2, including unauthenticated remote code execution, SQL injection, and buffer overflow issues. The advisories list flaws such as path traversal and parser bugs in components like the MongoDB protocol parser and the TDS PRELOGIN packet decoder.
The common thread is the network edge: crafted database traffic or web requests can confuse Guardium's input handling, and in some cases let an attacker run code, inject SQL, or trigger denial of service without logging in. That matters because Guardium is the appliance meant to inspect and protect those same sessions, so a compromise can undermine both the box and what it records or blocks.
For teams using Guardium between applications and sensitive databases, the exposure sits in the control plane that sits in the path, not just on the host itself. After the fix, the remaining question is which environments relied on those parsers to enforce trust over regulated data flows, because that layer is exactly what the flaws target.
CVEs in this update
10 CVEs
Across Guardium Data Protection.
2 critical · 8 high · 0 medium · 0 low
0 in CISA KEV · 0 with EPSS above 1%
Highest severity: CVE-2026-75875 · 9.8 CRITICAL
Highest EPSS: CVE-2026-75875 · 0.58%
1 source covering this story
Kwetsbaarheden verholpen in IBM Guardium Data Protection
IBM heeft meerdere kwetsbaarheden verholpen in IBM Guardium Data Protection versies 12.0, 12.1 en 12.2.
Part of the PlainSec briefing for 2026-10-16